Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: bgtgB7P0+U5e4tgS1TJ32JAzVuln4JlhQUwBzofRFME=
Subject key identifier: 56:92:65:53:79:F0:B1:DB:5A:67:26:8E:76:F6:23:E3:E4:4E:47:96
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 01A183AC66CD5D91F12BA3552A959AFC733F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 09B1
Signing time: Wed 28 Oct 2026 18:01:16 +0000
Manifest this update: Wed 28 Oct 2026 18:01:16 +0000
Manifest next update: Thu 29 Oct 2026 18:01:16 +0000
Files and hashes: 1: Hv-HpYlBtcGtjlR8qtNflDayGpQ.roa (hash: aBGsg4UHN28OpsS2xFbkAdXhnlHxP423kuvv3ReKy28=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: h/sxVAr/+KQZk26xwG6jUJSPrhn0E0mBud3pLqA5POo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:66:cd:5d:91:f1:2b:a3:55:2a:95:9a:fc:73:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Oct 28 18:01:16 2026 GMT
Not After : Oct 29 18:01:16 2026 GMT
Subject: CN=5692655379f0b1db5a67268e76f623e3e44e4796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:a5:cc:c1:9e:97:89:29:24:2c:5f:70:91:
07:77:99:03:c6:59:fd:a2:da:ca:6f:ee:f1:08:20:
02:b1:92:01:51:47:35:c5:36:31:72:4c:71:1e:f1:
48:a2:83:af:95:71:4c:8c:50:1f:d8:2d:d5:ed:3a:
82:4b:90:b3:9a:0a:67:19:f2:42:d7:1c:c0:f4:75:
f4:67:b3:fc:15:c8:9d:8b:92:d5:56:3e:3c:c6:06:
d6:93:9a:61:fc:a9:02:ac:15:e1:cb:6c:e4:1f:d9:
76:8b:b7:02:b9:5f:fe:23:a5:df:22:c6:e1:29:07:
c3:92:9a:e9:d6:0d:64:82:11:98:38:2a:33:66:1e:
d8:de:09:1a:53:78:ff:5b:8f:f8:00:7e:98:d3:2b:
28:b7:21:67:f6:f3:d4:bc:3c:d6:02:76:95:9b:03:
9f:f3:d2:f9:45:1d:07:56:a1:e0:27:6d:6e:ba:a2:
75:66:9a:b8:a9:5c:42:5a:24:24:19:cb:a1:90:d8:
d0:b5:04:42:3b:61:6b:d6:1e:81:05:92:54:25:c0:
4f:e3:d5:ef:99:9f:86:81:d2:45:e2:d7:99:21:18:
4f:8d:8a:2d:19:a5:54:cd:36:c7:d4:93:86:a4:e5:
1d:d3:93:c8:b8:77:46:2a:12:e2:cc:67:b1:c3:8d:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:65:53:79:F0:B1:DB:5A:67:26:8E:76:F6:23:E3:E4:4E:47:96
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d2:45:74:2b:b1:70:06:77:8d:38:52:a5:54:35:a6:37:6a:
64:b1:ca:0c:5a:14:51:ce:37:0a:3b:f0:07:c4:a5:bf:0b:26:
67:c6:6d:01:60:61:c9:6c:aa:cf:b6:19:a3:6d:b4:d2:31:0b:
7e:18:4a:86:d8:9a:59:d2:4b:17:c5:96:b3:c5:86:69:c9:7f:
51:82:45:a9:72:22:65:16:83:8d:80:60:df:b7:30:40:80:d6:
a3:08:9a:27:df:e3:8f:6c:17:9e:08:d7:f3:36:4b:1f:5b:a5:
19:59:2f:5d:6b:b0:ff:8b:c0:4e:6d:c6:dc:ca:a4:59:b5:63:
14:dc:dc:b4:23:25:55:83:63:18:c5:94:70:f3:28:37:ef:0b:
81:f2:5d:0e:d4:45:3b:8d:1f:ed:0b:24:ab:84:8e:f8:2e:2e:
9b:07:2c:48:69:c7:03:52:02:05:2f:14:7d:84:29:12:e0:24:
d4:da:9c:d6:a1:9d:fa:5d:d1:5d:c7:bc:f3:0b:91:af:fb:c9:
66:e4:3c:e5:99:57:77:a4:b0:16:fd:cd:d6:ff:60:cb:08:3c:
8a:cc:6b:c9:a0:5c:a4:3d:e8:f4:ee:2b:46:60:ba:b2:d7:75:
85:12:60:50:e7:4e:ee:22:06:da:f2:5b:ac:53:b6:1b:77:32:
be:97:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:49:58 2026 by rpki-client